$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: 9SYkZVK0s8Z13xtDXv9QphT52fToTdUOuonRp7sT2lU= Subject key identifier: B5:D5:39:E9:49:60:93:09:6D:9E:25:DA:05:E0:D7:AC:9E:9A:70:E4 Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 3D9B914C6C5FF21D7C5D6310F16B717EC520D62B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 03B1 Signing time: Sat 18 Oct 2025 04:51:10 +0000 Manifest this update: Sat 18 Oct 2025 04:46:10 +0000 Manifest next update: Tue 21 Oct 2025 14:45:10 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: V7M0p58EySF6mT8gLGrsSonHUSa7IjPKspjpTM/RP3g=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9b:91:4c:6c:5f:f2:1d:7c:5d:63:10:f1:6b:71:7e:c5:20:d6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Oct 18 04:46:10 2025 GMT Not After : Oct 21 14:45:10 2025 GMT Subject: CN=B5D539E9496093096D9E25DA05E0D7AC9E9A70E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:e4:7c:8b:49:fb:7c:ea:94:dd:17:4f:d8: 0e:ad:b0:09:09:a6:bc:b8:7b:bb:f5:7a:e7:62:f7: 6a:68:b1:cf:e1:e4:4a:73:f4:ae:99:4f:34:71:9b: e8:a5:5a:3e:9a:05:83:94:28:a7:85:d0:e5:f2:41: fa:77:6d:15:87:3b:09:c7:ba:7f:99:4f:e9:8e:9b: e8:9a:75:d3:8a:42:19:61:0c:14:21:64:dc:40:6a: 3f:ca:92:ec:f6:47:53:1e:dc:0a:8e:6b:bc:f0:90: 0a:59:45:72:b3:8d:2e:a7:dd:8e:bc:40:92:da:f8: 23:01:ba:04:e0:27:c3:0c:9f:93:eb:f7:d7:1a:5b: 14:82:8c:49:46:c7:6e:09:c8:c5:74:5f:4b:a0:2d: ba:95:c1:af:c1:d4:37:d5:e6:46:86:af:d5:16:92: 8f:ce:98:5b:2b:a8:4b:20:54:f3:f1:32:f2:9f:53: 32:aa:0e:f0:3b:fd:de:d4:7a:99:4b:e0:25:28:d5: dd:8f:5c:b8:a5:be:74:21:24:91:ba:ac:cf:a4:83: d3:31:b0:e8:c5:bd:0d:66:a4:37:52:54:c1:dc:ea: 77:7f:86:a5:be:28:17:00:11:f4:1b:c2:15:6f:a7: 76:7b:90:9b:ed:10:c3:0c:c6:a4:d9:5c:dd:7f:0d: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D5:39:E9:49:60:93:09:6D:9E:25:DA:05:E0:D7:AC:9E:9A:70:E4 X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:40:21:89:04:16:a2:21:f8:2d:7b:76:3b:2a:fa:f6:cd: c0:5d:e5:45:82:5e:d1:f4:05:c1:d7:0f:12:a0:9c:8b:3e:8e: 54:cf:72:97:0b:d5:7c:ce:84:46:01:f1:74:02:ba:e9:c8:15: a9:4e:5d:25:c8:e1:01:49:d2:dc:e9:cd:f7:7c:95:16:9a:96: 23:35:4a:7f:11:af:a6:65:0f:92:eb:fd:16:11:ed:53:06:4e: f6:0d:56:79:44:e6:8c:9b:bd:47:ee:74:3c:11:28:4c:80:e4: 1b:2c:c3:b8:16:44:cd:33:91:57:bb:2d:ef:5b:13:35:2f:2f: 6c:4c:58:49:94:2e:ac:31:44:1d:11:44:64:52:61:14:05:2b: 18:e6:fd:79:e9:ea:5b:36:e9:46:a2:5c:11:cf:8c:55:d2:1e: 3e:62:7a:87:5a:79:b5:b4:1b:02:22:d9:3c:25:c0:d0:c6:0c: c4:b4:a0:35:bc:76:88:ac:74:d0:a5:39:af:30:d6:27:ce:36: 71:6f:2c:ec:5c:47:36:14:d1:21:3c:00:b3:69:8e:ef:1b:d1: 78:e7:4b:b3:65:c5:da:dd:d1:ea:a7:9a:ca:89:74:11:de:23: 9f:96:4e:c3:9d:7a:c2:72:63:e1:48:40:f2:8f:0c:b0:1e:0e: 16:af:92:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZuRTGxf8h18XWMQ8WtxfsUg1iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTEwMTgwNDQ2MTBaFw0yNTEwMjExNDQ1MTBaMDMxMTAvBgNV BAMTKEI1RDUzOUU5NDk2MDkzMDk2RDlFMjVEQTA1RTBEN0FDOUU5QTcwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAquR8i0n7fOqU3RdP2A6tsAkJ pry4e7v1eudi92posc/h5Epz9K6ZTzRxm+ilWj6aBYOUKKeF0OXyQfp3bRWHOwnH un+ZT+mOm+iaddOKQhlhDBQhZNxAaj/Kkuz2R1Me3AqOa7zwkApZRXKzjS6n3Y68 QJLa+CMBugTgJ8MMn5Pr99caWxSCjElGx24JyMV0X0ugLbqVwa/B1DfV5kaGr9UW ko/OmFsrqEsgVPPxMvKfUzKqDvA7/d7UeplL4CUo1d2PXLilvnQhJJG6rM+kg9Mx sOjFvQ1mpDdSVMHc6nd/hqW+KBcAEfQbwhVvp3Z7kJvtEMMMxqTZXN1/DYk1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdU56UlgkwltniXaBeDXrJ6acOQwHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJNQCGJBBaiIfgte3Y7Kvr2zcBd5UWCXtH0 BcHXDxKgnIs+jlTPcpcL1XzOhEYB8XQCuunIFalOXSXI4QFJ0tzpzfd8lRaaliM1 Sn8Rr6ZlD5Lr/RYR7VMGTvYNVnlE5oybvUfudDwRKEyA5Bssw7gWRM0zkVe7Le9b EzUvL2xMWEmULqwxRB0RRGRSYRQFKxjm/Xnp6ls26UaiXBHPjFXSHj5ieodaebW0 GwIi2TwlwNDGDMS0oDW8doisdNClOa8w1ifONnFvLOxcRzYU0SE8ALNpju8b0Xjn S7Nlxdrd0eqnmsqJdBHeI5+WTsOdesJyY+FIQPKPDLAeDhavkpE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:27:45 2025 by rpki-client